Topic

CVE-2026-94545

News, analysis and practical guidance on CVE-2026-94545.

1 articleUpdated 29 Sep 2026

ThreatsCloud & SaaSCritical
Next.js ImageResponse Satori SVG Template Injection Vulnerability Enables Remote Code Execution (CVE-2026-94545)
A critical template injection flaw in Next.js next/og (CVE-2026-94545) allows unauthenticated remote attackers to execute arbitrary code via Satori SVG parsing.
Daniel Okafor29 Sep 202610 min read